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AMENDMENTS TO THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1. (original) A method for generating an authentication rating for an entity, comprising: 
receiving a message identifying an entity, which message requires authentication of 
said entity; receiving data from each of a plurality of sources, said data representing at 
least a rating for said authentication according to a criteria; analysing said received data 
using a set of predefined fuzzy inferencing rules so as to calculate an authentication 
rating for said entity 

2. (original) A method according to claim 1, wherein said data from each source 
comprise data representing a trust rating for said entity and data representing an 
associated confidence rating. 

3. (original) A method according to claim 2, wherein the analysis comprises: combining 
said plurality of data representing a trust rating using a first predefined set of fuzzy 
inferencing rules so as to calculate a combined trust rating; combining said plurality of 
confidence rating data using a second predefined set of fuzzy inferencing rules to 
calculate a combined confidence rating; and then analysing said combined trust rating 
and said combined confidence rating using a third predefined set of fuzzy inferencing 
rules so as to calculate said authentication rating. 
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4. (currently amended) A method according to any procoding clainrM , where one of the 
sources is a local store for storing previous case data relating to a user. 

5. (original) A system for generating an authentication rating for an entity, comprising: 
receiving means for receiving a message identifying an entity, which message requires 
identification of said entity; the receiving means being further arranged to receive in use 
from each of a plurality of sources data representing a rating of said entity according to 
a criteria; and processing means arranged in use to analyse said received data using a 
set of predefined fuzzy inferencing rules so as to calculate an authentication rating for 
said entity. 

6. (original) A system according to claim 5, said processing means being further 
arranged to compare said authentication rating with a predefined policy so as to 
determine whether to issue, an authenticate signal. ' 

7. (currently amended) A computer program or suite of programs executable by a 
computer system to cause the system to perform the method of any of claims 1 to A 
claim 1 . 

8. (original) A modulated carrier signal incorporating data corresponding to the 
computer, program or at least one of the suite of programs of claim 7. 
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9. (original) A computer readable storage medium storing a computer program or at 
least one of a suite of computer programs as claimed in claim 7. 
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